Tuesday 24 February 2015

GPO: Change folder permission on client PCs using GPO

How to apply or modify permission entries for objects using Group Policy

  1. Open Group Policy console.
  2. Edit or create a group policy object.
  3. Depending on what kind of object you would like to change the permissions for:
    System services
    In the console tree, click System Services:
    Computer Configuration/Windows Settings/Security Settings/System Services
    In the details pane, right-click the service you want to change, click Properties, select the Define this policy setting check box, and then click Edit Security.
    Registry keys
    In the console tree, right-click Registry.
    Computer Configuration/Windows Settings/Security Settings/Registry
    Click Add Key, in Select Registry Key, click the key that you want to change, and then click OK.
    Files or folders
    In the console tree, right-click File System.
    Computer Configuration/Windows Settings/Security Settings/File System
    Click Add File, in Add a file or folder, click the file or folder that you want to change, and then click OK.
  4. Do one of the following:
    • To set permissions for a group or user that does not appear in the Group or user names box, click Add. Type the name of the group or user you want to set permissions for, and then click OK.
    • To change or remove permissions from an existing group or user, click the name of the group or user.
  5. Do one of the following:
    • To allow a permission, in the Permissions for User or Group box, select the Allow check box.
    • To deny a permission, in the Permissions for User or Group box, select the Deny check box.
    • To remove the group or user from Group or user names, click Remove.